3 ms·

I'd argue that, in a dynamically linked system, the onus in on the system maintainer, not the application developer, to fix these issues.

• jakear 7y ago
  And in this case, it was apparently the system maintainer that introduced the bugs. (By patching VLC to use a shared, outdated, and insecure library instead of the one the developers shipped it with). This puts a very bad taste in my mouth re the GNU+Linux ecosystem. Being able to specify “use this version at minimum” is a critical feature of any dependency management system, and it seems like distributions don’t really provide that.
  • deleted 7y ago
    [deleted]
  • deleted 7y ago
    [deleted]